#!/bin/bash

set -o errexit -o nounset -o pipefail

replicas=({1..3}.grapheneos.org)

for replica in ${replicas[@]}; do
    echo
    echo Deploying to $replica
    echo

    rsync -rptvl --fsync --delete /etc/letsencrypt/ $replica:/etc/letsencrypt
    rsync -rptvl --fsync --delete /var/cache/certbot-ocsp-fetcher/ $replica:/var/cache/certbot-ocsp-fetcher
    ssh root@$replica nginx -s reload
done